H3CS5500基本配置思路及实用命令

H3CS5500基本配置思路及实用命令 H3C S5500基本配置思路及实用命令1.总体配置思路1)添加VLAN1，并将相应端口添加到该VLAN。 (在VLAN状态下才可一次将多个端口加入相应VLAN,interface e1/0/1to e1/0/24)2)添加VLAN2，并将其置为管理VLAN(在#状态下management-vlan2)，才可设置其VLAN的IP地址。 3)添加静态路由。 4)配置端口TRUNK模式。 5)配置远程登录VTY认证。 6)配置本地用户。 2.进入特权模式System ViewSystem ViewSystem View:return toUser Viewwith Ctrl+Z.H3CdisH3Cdisplay cur3.配置交换机主机名sysname sysnameH3C4.添加VLAN vlan1或在此状态下直接将相应端口加入该VLAN(否则只能一个口一个口的添加)Interface e1/0/1to e1/0/245.配置管理VLAN-management-vlan management-vlan26.给管理VLAN添加IP地址interface Vlan-interface1ip address10.10.40.176255.255.255.07.添加端口到VLANport aessvlan1interface GigabitEther1/0/2port aessvlan18.远程登录配置及3A认证模式user-interface vty04authentication-mode schemeuser-interface vty04authentication-mode scheme9.配置3A认证本地用户及属性local-user testpa0.0.0.010.10.40.110.查看路由表display iprouting-tableH3Cdisplay iprouting-table RoutingTables:Public Destinations:7Routes:7Destination/Mask ProtoPre CostNextHop Interface0.0.0.0/Static.10.40.1Vlan210.10.40.0/24Direct.10.40.180Vlan210.10.40.180/32Direct.0.0.1InLoop0127.0.0.0/Direct.0.0.1InLoop0127.0.0.1/32Direct.0.0.1InLoop0192.168.76.0/24Direct.168.76.3Vlan76192.168.76.3/32Direct.0.0.1InLoop011.显示当前配置display current-configurationH3Cdisplay current-configuration12.查看端口及VLAN的up/down状态display briefinterfaceH3Cdisplay briefinterface The brief information of interface(s)under routemode:Interface LinkProtocol-link Protocoltype MainIP NULLUP UP(spoofing)NULL-VlanUP UPETHERNET192.168.76.3VlanUP UPETHERNET10.10.40.180The briefinformation ofinterface(s)under bridgemode:Interface LinkSpeed DuplexLink-type PVIDGE1/0/UP1G(a)full(a)aess1GE1/0/DOWN autoauto aess1GE1/0/DOWN autoauto aess1GE1/0/DOWN autoauto aess1GE1/0/DOWN autoauto aess1display briefinterface GigabitEther1/0/1H3Cdisplay briefinterface GigabitEther1/0/1The briefinformation ofinterface(s)under bridgemode:Interface LinkSpeed DuplexLink-type PVIDGE1/0/UP1G(a)full(a)aess1display briefinterface Vlan-interface1H3Cdisplay briefinterface Vlan-interface1Thebriefinformationofinterface(s)under routemode:Interface LinkProtocol-link Protocoltype MainIP VlanUP UPETHERNET192.168.76.313.查看MAC地址缓存表display mac-addressH3Cdisplay mac-address MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)0000-e7aLearned GigabitEther1/0/19AGING0000-e8fLearned GigabitEther1/0/19AGING0001-6c41-9cee1Learned GigabitEther1/0/19AGING000c-2919-0d6c1Learned GigabitEther1/0/19AGING000c-2961-d8ea1Learned GigabitEther1/0/19AGING14.查看某一端口的MAC地址缓存表display mac-address interfaceGigabitEther1/0/1H3Cdisplay mac-address interfaceGigabitEther1/0/1MACADDRVLANIDSTATEPORTINDEXAGINGTIME(s)0016-3642-eLearned GigabitEther1/0/1AGING0016-eca2-d69d1Learned GigabitEther1/0/1AGING001c-25d8-77bLearned GigabitEther1/0/1AGING0024-1d6e-6fbe1Learned GigabitEther1/0/1AGING15.查看ARP缓存表display arpH3Cdisplay arpType:S-Static D-Dynamic IPAddress MACAddress VLANID InterfaceAging Type192.168.76.eca2-d69d1GE1/0/D192.168.76.eGE1/0/D192.168.76.d6e-6fbe1GE1/0/D10.10.40.d-4fcGE1/0/D192.168.76.d-4fcGE1/0/D或config.cfg配置文件可能在fla或config.cfg配置文件可能在fla1-rw-2365Apr26200012:13:58startup.cfg(配置文件名)31496KB total(23460KB free)dir Directoryof unit1fla2(*)-rw-3711222Mar25xx16:51:52s31si_e-cmw310-r2211p07.bin3(*)-rw-886025Jan01xx00:00:00h3c-4(*)-rw-2834Apr03200001:20:33config.cfg(配置文件名)7239KB total(2739KB free)(*)-with mainattribute(b)-with backup attribute(*b)-with bothmain andbackup attributeput unit1fla10.10.40.185.txt File will be transferred in binary mode.Sending file to remote|2(*)-rw-3711222Mar25xx16:51:52s31si_e-cmw310-r2211p07.bin3(*)-rw-886025Jan01xx00:00:00h3c-4(*)-rw-2979Apr02200007:17:02config.cfg7239KB total(2739KB free)(*)-with mainattribute(b)-with backupattribute(*b)-with bothmain andbackupattribute配置可以使用0jyzx-px-zhongxinacl number2000jyzx-px-zhongxin-acl-basic-2000rule permitsource172.16.8.91?0Wildcard bits:0.0.0.0(a host)X.X.X.X Wildcardof sourcejyzx-px-zhongxin-acl-basic-2000rule permitsource172.16.8.910配置备份配置文件到put fla(无目标文件名则表示与源文件名同名)put flastartup.txt(将配置文件保存为txt文件)put flaFilewill betransferred inbinary mode Sending fileto remoteput fla10.10.40.177.txt FilewillbetransferredinbinarymodeSendingfiletoremote0quit putfla10.10.40.177.txt16.关闭实时信息-undo info-center enablejyzx-bg-4-xundo info-center enable%Information centeris disable